c371ed8d30
* Fix over-byte * Fix nxos_l2_interface docs * Update connections for tasks * Add default ssh port * Only report provider when using connection=local * Send empty provider when connection=network_cli * Fix find tasks
120 lines
2.7 KiB
YAML
120 lines
2.7 KiB
YAML
---
|
|
- debug: msg="START connection={{ ansible_connection }} nxos_acl_interface sanity test"
|
|
- debug: msg="Using provider={{ connection.transport }}"
|
|
when: ansible_connection == "local"
|
|
|
|
# Select interface for test
|
|
- set_fact: intname="{{ nxos_int1 }}"
|
|
|
|
- name: "Interface selected for this test"
|
|
debug: msg="{{ intname }}"
|
|
|
|
- name: "Setup: Put interface into a default state"
|
|
nxos_config: &default
|
|
lines:
|
|
- "default interface {{ intname }}"
|
|
provider: "{{ connection }}"
|
|
ignore_errors: yes
|
|
|
|
- name: "Setup: Cleanup possibly existing acl"
|
|
nxos_acl: &remove
|
|
name: ANSIBLE_ACL
|
|
seq: 10
|
|
state: absent
|
|
provider: "{{ connection }}"
|
|
ignore_errors: yes
|
|
|
|
- name: Configure Supporting ACL
|
|
nxos_acl:
|
|
name: ANSIBLE_ACL
|
|
seq: 10
|
|
action: permit
|
|
proto: tcp
|
|
src: 1.1.1.1/24
|
|
dest: any
|
|
provider: "{{ connection }}"
|
|
|
|
- block:
|
|
- name: Configure acl interface egress
|
|
nxos_acl_interface: &configure_egr
|
|
name: ANSIBLE_ACL
|
|
interface: "{{ intname }}"
|
|
direction: egress
|
|
state: present
|
|
provider: "{{ connection }}"
|
|
register: result
|
|
|
|
- assert: &true
|
|
that:
|
|
- "result.changed == true"
|
|
|
|
- name: "Check Idempotence egress"
|
|
nxos_acl_interface: *configure_egr
|
|
register: result
|
|
|
|
- assert: &false
|
|
that:
|
|
- "result.changed == false"
|
|
|
|
- name: Configure acl interface ingress
|
|
nxos_acl_interface: &configure_ingr
|
|
name: ANSIBLE_ACL
|
|
interface: "{{ intname }}"
|
|
direction: ingress
|
|
state: present
|
|
provider: "{{ connection }}"
|
|
register: result
|
|
|
|
- assert: *true
|
|
|
|
- name: "Check Idempotence ingress"
|
|
nxos_acl_interface: *configure_ingr
|
|
register: result
|
|
|
|
- assert: *false
|
|
|
|
- name: Cleanup acl interface egress
|
|
nxos_acl_interface: &cleanup_egr
|
|
name: ANSIBLE_ACL
|
|
interface: "{{ intname }}"
|
|
direction: egress
|
|
state: absent
|
|
provider: "{{ connection }}"
|
|
register: result
|
|
|
|
- assert: *true
|
|
|
|
- name: "Check Idempotence egress cleanup"
|
|
nxos_acl_interface: *cleanup_egr
|
|
register: result
|
|
|
|
- assert: *false
|
|
|
|
- name: Cleanup acl interface ingress
|
|
nxos_acl_interface: &cleanup_ingr
|
|
name: ANSIBLE_ACL
|
|
interface: "{{ intname }}"
|
|
direction: ingress
|
|
state: absent
|
|
provider: "{{ connection }}"
|
|
register: result
|
|
|
|
- assert: *true
|
|
|
|
- name: "Check Idempotence ingress cleanup"
|
|
nxos_acl_interface: *cleanup_ingr
|
|
register: result
|
|
|
|
- assert: *false
|
|
|
|
rescue:
|
|
- name: Put test interface into default state.
|
|
nxos_config: *default
|
|
ignore_errors: yes
|
|
|
|
- name: Remove possible configured ACL
|
|
nxos_acl: *remove
|
|
ignore_errors: yes
|
|
|
|
always:
|
|
- debug: msg="END connection={{ ansible_connection }} nxos_acl_interface sanity test"
|